StorageTek T10000C Tape Drive
 
Sun StorageTek 9840D Tape Drive
 
Sun StorageTek T10000A Tape Drive
 
Sun StorageTek T10000 Tape Drive
 
Sun StorageTek T10000B Tape Drive
 

PLA-Support>Sun Systems>TAPE>Tape Hardware>SN-TP: STK T-Series Drive
 

In this Document

Goal

Solution

Applies to:

Goal

How to Enable, Disable, Reset, Remove Encryption on Tape Drive.

Solution

If you do not set "permanent encryption on" in the drive then you can change the drive to be a non-encrypted drive later on.

Note: The procedure can be done with VOP (Virtual Op Panel) for Customers found on https://edelivery.oracle.com/

To RESET the drive:
1. Connect to the drive with VOP and issue the reset command to the drive.
2. The drive will show RESET in the display.

To reuse a RESET drive:

If you want to remove encryption from the drive follow these steps. You will only be allowed to remove encryption from a drive if it is not set for permanent encryption.

Un-enroll the drive using VOP. (this will remove RESET from the display) he need to do the following:

To un-enroll the drive do the following:
1. Take the drive offline   - select Drive Operations>Set Offline
2. Click Configure>Drive Data>Encrypt
3. It should have an option that says "Turn Encryption Off.  Set it for yes.

Note:
If you do not get this option then check if the drive is set for permanent encrypting on this same screen. If it is set for yes then you cannot remove encryption from the drive. You will be able to enroll the drive again.

4. Click Commit.
5. IPL the drive.
You should now have a * on the display.
This drive can now be used as a non-encrypting drive.

Note:
Reset is only required when you need to remove encryption or re-enroll a drive, if drive is in a hung state and no longer requesting keys only a reboot is needed.

To re-enable the drive as an encrypting drive or to re-enroll a drive:

Note: For DPKM encryption please see the attached document. You will need to license any T10KA or T10KB drives for encryption in order to setup the drive for DPKM encryption.

For OKM encryption follow these instructions.
Once the drive is RESET, you can re-enroll the drive for encryption.
1. Take the drive offline   - select Drive Operations>Set Offline
2. Click Configure>Drive Data>Encrypt.
3. Verify the correct KMA IP address is set in the drive.
4. Delete the Agent ID and press Commit.
5. Add the agent back into the KMA using a new phase phrase.

To Check for Permanently Encrypted drives:
You can view Encryption Status under VOP.
1. Connect to the drive with VOP
2. Click Retrieve>View Drive Data>Encryption

Permanently Encrypting:
If it says yes then you will not be able to reset the drive.

This solution has no attachment